CVE - CVE-2024-38587

CVE-ID
CVE-2024-38587	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof() vs ARRAY_SIZE() bug The "buf" pointer is an array of u16 values. This code should be using ARRAY_SIZE() (which is 256) instead of sizeof() (which is 512), otherwise it can the still got out of bounds.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b URL:https://git.kernel.org/stable/c/008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b MISC:https://git.kernel.org/stable/c/07ef95cc7a579731198c93beed281e3a79a0e586 URL:https://git.kernel.org/stable/c/07ef95cc7a579731198c93beed281e3a79a0e586 MISC:https://git.kernel.org/stable/c/3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e URL:https://git.kernel.org/stable/c/3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e MISC:https://git.kernel.org/stable/c/42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358 URL:https://git.kernel.org/stable/c/42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358 MISC:https://git.kernel.org/stable/c/504178fb7d9f6cdb0496d5491efb05f45597e535 URL:https://git.kernel.org/stable/c/504178fb7d9f6cdb0496d5491efb05f45597e535 MISC:https://git.kernel.org/stable/c/c6e1650cf5df1bd6638eeee231a683ef30c7d4eb URL:https://git.kernel.org/stable/c/c6e1650cf5df1bd6638eeee231a683ef30c7d4eb MISC:https://git.kernel.org/stable/c/cd7f3978c2ec741aedd1d860b2adb227314cf996 URL:https://git.kernel.org/stable/c/cd7f3978c2ec741aedd1d860b2adb227314cf996 MISC:https://git.kernel.org/stable/c/d52c04474feac8e305814a5228e622afe481b2ef URL:https://git.kernel.org/stable/c/d52c04474feac8e305814a5228e622afe481b2ef MISC:https://git.kernel.org/stable/c/eb1ea64328d4cc7d7a912c563f8523d5259716ef URL:https://git.kernel.org/stable/c/eb1ea64328d4cc7d7a912c563f8523d5259716ef
Assigning CNA
kernel.org
Date Record Created
20240618	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240618)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.